Summary: | REGRESSION(r143654): some fast/js test crashes on 32 bit build | ||||||
---|---|---|---|---|---|---|---|
Product: | WebKit | Reporter: | Zoltan Arvai <zarvai> | ||||
Component: | Tools / Tests | Assignee: | Filip Pizlo <fpizlo> | ||||
Status: | RESOLVED FIXED | ||||||
Severity: | Normal | CC: | fpizlo, hausmann, jberlin, jturcotte, kadam, oliver, ossy, zan | ||||
Priority: | P2 | ||||||
Version: | 528+ (Nightly build) | ||||||
Hardware: | Unspecified | ||||||
OS: | Unspecified | ||||||
Bug Depends on: | |||||||
Bug Blocks: | 79668, 109371 | ||||||
Attachments: |
|
Description
Zoltan Arvai
2013-02-22 04:57:06 PST
Some update about crashing tests: Qt Linux Release and x86-32 Linux Qt Release NRWT bot: fast/js/regress/HashMap-string-put-get-iterate.html fast/js/dfg-value-to-int32-with-side-effect.html x86-32 Linux Qt Debug bot: fast/js/regress/HashMap-string-put-get-iterate.html fast/js/regress/tear-off-arguments-simple.html fast/js/dfg-dead-min-one-arg.html fast/js/dfg-value-to-int32-with-side-effect.html http://build.webkit.sed.hu/results/x86-32%20Linux%20Qt%20Debug/r143654%20%2824514%29/results.html Skipped on Qt in http://trac.webkit.org/changeset/143716 : fast/js/regress/HashMap-string-put-get-iterate.html fast/js/dfg-value-to-int32-with-side-effect.html I don't think if it is a Qt specific bug, but a bug in 32 bit DFG JIT. (In reply to comment #3) > I don't think if it is a Qt specific bug, but a bug in 32 bit DFG JIT. You're right, I found it on GTK Linux 32-bit Release bot, too. fast/js/dfg-value-to-int32-with-side-effect-crash-log.txt: Crash log for DumpRenderTree (pid 17731): Coredump core-pid_17731-_-process_DumpRenderTree not found. To enable crash logs: - run this command as super-user: echo "/path/to/coredumps/core-pid_%p-_-process_%e" > /proc/sys/kernel/core_pattern - enable core dumps: ulimit -c unlimited - set the WEBKIT_CORE_DUMPS_DIRECTORY environment variable: export WEBKIT_CORE_DUMPS_DIRECTORY=/path/to/coredumps STDERR: 1 0xb759f5b6 /var/lib/buildbot/build/gtk-linux-32-release/build/WebKitBuild/Release/.libs/libjavascriptcoregtk-3.0.so.0(_ZN3JSC3DFG14SpeculativeJIT19compileValueToInt32EPNS0_4NodeE+0x79c) [0xb759f5b6] STDERR: 2 0xb7571153 /var/lib/buildbot/build/gtk-linux-32-release/build/WebKitBuild/Release/.libs/libjavascriptcoregtk-3.0.so.0(_ZN3JSC3DFG14SpeculativeJIT7compileEPNS0_4NodeE+0x7d4b) [0xb7571153] STDERR: 3 0xb7594f4e /var/lib/buildbot/build/gtk-linux-32-release/build/WebKitBuild/Release/.libs/libjavascriptcoregtk-3.0.so.0(_ZN3JSC3DFG14SpeculativeJIT7compileERNS0_10BasicBlockE+0x44a) [0xb7594f4e] STDERR: 4 0xb759c399 /var/lib/buildbot/build/gtk-linux-32-release/build/WebKitBuild/Release/.libs/libjavascriptcoregtk-3.0.so.0(_ZN3JSC3DFG14SpeculativeJIT7compileEv+0x65) [0xb759c399] STDERR: 5 0xb7533c97 /var/lib/buildbot/build/gtk-linux-32-release/build/WebKitBuild/Release/.libs/libjavascriptcoregtk-3.0.so.0(_ZN3JSC3DFG11JITCompiler11compileBodyERNS0_14SpeculativeJITE+0x1b) [0xb7533c97] STDERR: 6 0xb753701b /var/lib/buildbot/build/gtk-linux-32-release/build/WebKitBuild/Release/.libs/libjavascriptcoregtk-3.0.so.0(_ZN3JSC3DFG11JITCompiler15compileFunctionERNS_7JITCodeERNS_21MacroAssemblerCodePtrE+0x1bf) [0xb753701b] STDERR: 7 0xb752b82f /var/lib/buildbot/build/gtk-linux-32-release/build/WebKitBuild/Release/.libs/libjavascriptcoregtk-3.0.so.0(+0x19d82f) [0xb752b82f] STDERR: 8 0xb76ec7d7 /var/lib/buildbot/build/gtk-linux-32-release/build/WebKitBuild/Release/.libs/libjavascriptcoregtk-3.0.so.0(_ZN3JSC18FunctionExecutable22compileForCallInternalEPNS_9ExecStateEPNS_7JSScopeENS_7JITCode7JITTypeEj+0x3a1) [0xb76ec7d7] STDERR: 9 0xb76ed20b /var/lib/buildbot/build/gtk-linux-32-release/build/WebKitBuild/Release/.libs/libjavascriptcoregtk-3.0.so.0(_ZN3JSC18FunctionExecutable23compileOptimizedForCallEPNS_9ExecStateEPNS_7JSScopeEj+0x65) [0xb76ed20b] STDERR: 10 0xb74a27fc /var/lib/buildbot/build/gtk-linux-32-release/build/WebKitBuild/Release/.libs/libjavascriptcoregtk-3.0.so.0(_ZN3JSC17FunctionCodeBlock16compileOptimizedEPNS_9ExecStateEPNS_7JSScopeEj+0x4e) [0xb74a27fc] STDERR: 11 0xb76204cc /var/lib/buildbot/build/gtk-linux-32-release/build/WebKitBuild/Release/.libs/libjavascriptcoregtk-3.0.so.0(+0x2924cc) [0xb76204cc] STDERR: 12 0xab7586b3 [0xab7586b3] STDERR: 13 0xb75d6900 /var/lib/buildbot/build/gtk-linux-32-release/build/WebKitBuild/Release/.libs/libjavascriptcoregtk-3.0.so.0(_ZN3JSC11Interpreter7executeEPNS_17ProgramExecutableEPNS_9ExecStateEPNS_8JSObjectE+0xccc) [0xb75d6900] STDERR: 14 0xb687d3e5 /var/lib/buildbot/build/gtk-linux-32-release/build/WebKitBuild/Release/.libs/libwebkitgtk-3.0.so.0(+0x112f3e5) [0xb687d3e5] gdb backtrace on 32 bit with Qt5.0.1 and WebKit r143723 fast/js/dfg-value-to-int32-with-side-effect.html https://gist.github.com/azbesthu/5015087 fast/js/regress/HashMap-string-put-get-iterate.html https://gist.github.com/azbesthu/5015103 fast/js/regress/tear-off-arguments-simple.html https://gist.github.com/azbesthu/5015119 fast/js/dfg-dead-min-one-arg.html https://gist.github.com/azbesthu/5015134 I'm leaning towards a rollout unless the fix is obvious. I'll know in the next hour (on a bus currently) (In reply to comment #6) > I'm leaning towards a rollout unless the fix is obvious. I'll know in the next hour (on a bus currently) I am looking at it. (In reply to comment #7) > (In reply to comment #6) > > I'm leaning towards a rollout unless the fix is obvious. I'll know in the next hour (on a bus currently) > > I am looking at it. Fix is easy. Will have patch shortly. Created attachment 189831 [details]
the patch
Comment on attachment 189831 [details]
the patch
r=me
Landed in http://trac.webkit.org/changeset/143800 |